Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/AKDA96-4Q5IsS_k_HqopqkWhsNk.roa
File: AKDA96-4Q5IsS_k_HqopqkWhsNk.roa (raw, json)
Hash identifier: P3GA96aGwuNn6oLrlrZ3NV0mF10Qmiy/v9SAcjAajVY=
Subject key identifier: 00:A0:C0:F7:AF:B8:43:92:2C:4B:F9:3F:1E:AA:29:AA:45:A1:B0:D9
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 0184FC7D4BB5B50AE223CBBA57D84C1065A6
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/AKDA96-4Q5IsS_k_HqopqkWhsNk.roa
Signing time: Sat 10 Dec 2022 14:43:00 +0000
ROA not before: Sat 10 Dec 2022 14:43:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400536
IP address blocks: 194.87.123.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:fc:7d:4b:b5:b5:0a:e2:23:cb:ba:57:d8:4c:10:65:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Dec 10 14:43:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=00a0c0f7afb843922c4bf93f1eaa29aa45a1b0d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f5:89:f0:df:23:5f:e8:0e:b3:fc:b6:2a:2c:
98:c4:70:5f:72:60:09:d2:e9:55:41:9b:71:5d:e4:
01:cc:62:15:99:d8:e4:71:51:6a:a1:41:b7:ba:a1:
ad:a0:d2:c0:9a:e0:42:cb:9c:30:18:1b:4c:15:f3:
5e:9f:8e:8a:3b:fc:84:24:ca:18:50:14:a6:0c:ec:
04:a2:c2:e8:c1:db:84:63:61:45:cd:9e:ce:75:0b:
30:b1:01:82:c4:3b:53:cd:ec:bf:2d:a5:b5:be:f3:
1d:72:6c:9a:d5:3d:55:10:d8:d0:d7:c5:18:c7:74:
bd:51:16:cb:49:79:9f:81:9f:f7:72:50:ad:83:93:
21:77:83:51:dd:25:18:79:ec:55:f8:dc:68:f3:0d:
b3:c3:ab:ac:39:b3:bd:b5:68:28:83:7d:71:b8:2d:
2b:ad:da:72:5e:1a:f3:9e:48:ec:85:1f:13:ff:9c:
e6:b5:ba:63:a9:59:9f:41:93:c0:d7:a4:73:77:e8:
e7:db:61:0e:10:b6:2a:7a:89:1c:55:17:f7:f4:34:
e3:96:ed:cb:49:b1:2c:2a:7d:d2:38:9b:bf:c9:25:
fc:e1:08:56:38:ce:c9:c4:62:94:8f:36:f9:a8:82:
ad:20:3e:fe:e2:b8:dc:23:e5:d9:14:0e:66:dc:50:
be:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:A0:C0:F7:AF:B8:43:92:2C:4B:F9:3F:1E:AA:29:AA:45:A1:B0:D9
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/AKDA96-4Q5IsS_k_HqopqkWhsNk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.123.0/24
Signature Algorithm: sha256WithRSAEncryption
08:13:54:cd:db:98:09:d0:91:b1:df:97:9c:70:91:44:24:04:
e9:20:51:01:0e:89:14:2e:6c:36:60:27:41:49:f3:34:f1:fc:
7c:02:6c:e5:44:a6:57:3d:2f:90:16:1a:0d:a9:37:a8:dc:86:
99:88:1f:b0:02:18:15:c2:9e:b5:51:db:1d:ba:ba:bc:f2:ba:
a8:b1:48:0b:4f:a2:ee:1a:6e:ad:d9:d1:56:b1:c9:fe:ad:1c:
78:a5:f4:de:af:2d:ca:ef:21:25:a4:a6:40:71:70:a0:31:02:
ec:86:75:24:ed:78:2c:4e:86:2f:3a:f4:c6:ce:2a:6a:37:84:
3a:73:65:b9:2b:c2:23:a6:06:40:04:81:3b:f0:b2:f5:95:a3:
35:23:e1:3f:04:ca:b4:63:26:de:14:23:b2:a9:97:c0:f6:c4:
3c:a2:47:b6:61:a7:ab:bc:04:ef:f5:86:5a:cc:04:1b:70:32:
b3:96:24:78:7d:6e:3d:fc:2e:36:1f:56:75:d0:71:48:26:59:
b6:f3:99:b1:fc:91:5b:4b:3d:c2:08:83:13:36:d8:77:1e:4a:
f1:0b:a5:bd:18:08:72:21:28:cf:fc:f0:c3:f8:49:3d:47:82:
c1:83:31:fb:0c:66:7a:00:03:71:e1:ca:5b:d6:49:ab:8c:4a:
80:86:25:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:08 2024 by rpki-client on console-fra.rpki-client.org